GHSA-5mqq-7g25-r4wx
FeehiCMS vulnerable to Cross-Site scripting via crafted payload
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | feehi/feehicms | <= 2.0.1.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
FeehiCMS versions 2.0.1.1 and prior contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Single Page module. There are no patches and no known workarounds for this issue.
References
External links from the advisory. They lead to third-party sites.